Task: Implement Hotfix: three reporting tables carry a tenant and no row-level security

Take validate_schemas.sh to 0 warnings, so the continuous builds and the pull-request verifier stop failing before they build anything.

• The three models carry :rls_tenant_isolation: true in the SQL flags drawer.
• The generated create SQL enables row-level security and creates the tenant isolation policy; the drop SQL drops the policy.
• validate_schemas.sh is green and check_sql_hygiene.py is clean.
• The full suite passes on a database created from the new SQL.

1. Add the facet to the three models.
2. Regenerate the reporting component and read the SQL diff.
3. Run the validator and the hygiene check.
4. Recreate the database, then run the reporting suites and the full suite, because row-level security changes what a write is allowed to do.

• The tables did not exist in the worktree's database at all: main added them after the last recreation, which is also why three suites failed on a column main had added. The verification therefore needs a database built from this branch's SQL, not a patch applied to the old one.
• check_cmake_component_files.py and the generator's file list are untouched: no source file was added.

The three models declare the tenant isolation facet and their create and drop SQL carry the policy. validate_schemas.sh reports 0 warnings over 1796 files and the hygiene check is clean; the suites run on a database built from the new SQL.